CVE-2025-6932

CVE-2025-6932 affects D-Link DCS-7517 (firmware up to 2.02.0) due to a vulnerability in the Qlync Password Generation Handler’s function g_F_n_GenPassForQlync in /bin/httpd. The root cause is the use of a hard-coded password, enabling remote initiation of an attack. Public disclosures exist, but ...

CVE-2025-6931

CVE-2025-6931 affects D-Link DCS-6517 and DCS-7517 (firmware ≤ 2.02.0). The vulnerability resides in the function generate_pass_from_mac within /bin/httpd of the Root Password Generation Handler, causing insufficient entropy. It supports remote exploitation and is described as high attack complex...